another ssh question

[Teo Fonrouge]

On Friday 10 August 2007 06:08:38 pm tony.chamberlain at lemko.com wrote:
> I was looking and at playing around with /etc/ssh/sshd_conf. What I want to
> do is after say 5 or so failed attempts to ssh, I want it to block ssh at
> least for a time (to keep people from hacking in). I uncommented anything
> that looked like it might do that, restarted sshd (even rebooted). Then I
> tried to ssh several times making up things for password: banana, orange,
> lemon, apple, etc. (the real password is nothing like that). I got through
> all the fruits and several vegetables and it still wasn't denied. When I
> finally entered the correct password it let me in right away.
>
> What is the correct way to block ssh attempts after several failed ones?

An easy way is to acomplish this, is to install the denyhosts package :

$ yum install denyhosts

You can configure a lot of settings in the /etc/denyhosts.conf file.


best regards

Teo Fonrouge